$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa File: 32f3d38e-c211-345a-82f5-50a97e79c6ef.roa (raw, json) Hash identifier: HtcHNsJAoERdNkoMatuE3qf+u+3PPZ9q5ONBp1Qjf54= Subject key identifier: 5E:98:22:7F:6B:35:8E:F0:F2:13:C2:52:95:37:CF:E4:4C:E2:82:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423699C7D7A90DA4F25CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 69.66.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:36:99:c7:d7:a9:0d:a4:f2:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=f227c51a-fae1-427e-b2cd-c3ec032cad29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:f9:37:4e:29:fd:da:1d:53:7c:cd:82:c5: 09:56:24:5e:39:2c:79:1a:9f:ca:58:4b:ed:c9:25: 6a:0d:58:b0:62:f3:7a:30:53:d2:94:df:3d:15:7c: d4:63:b9:73:9b:bd:3f:e1:0d:61:bd:20:ec:dc:0c: 23:89:32:6b:05:6a:13:6f:24:8c:5c:90:97:44:2c: b2:9b:e1:36:2a:7a:13:76:32:d1:0b:1b:92:8b:cb: 02:dd:66:71:17:72:f0:21:37:19:4d:d3:32:5c:c3: 32:b9:fd:1f:56:2d:da:a9:a1:74:96:49:20:57:80: 77:bb:76:ce:8f:69:3c:7c:5d:18:a6:f0:8d:f9:3e: 8a:16:1f:f7:a2:52:1a:a0:77:40:42:7f:e1:20:f3: 44:29:d8:5f:10:b9:b2:b9:17:5a:dd:16:a6:69:ab: e1:72:6b:a0:62:80:2f:ae:9f:2a:a1:41:e8:f1:03: 1b:87:84:29:ae:f0:cf:ba:5c:76:3a:65:45:a0:75: ed:ab:48:9b:e3:ad:8b:a4:02:5a:b6:06:57:ee:74: f5:09:c0:8e:c8:8f:bb:c5:f0:c8:90:1e:bd:50:9c: ab:6a:be:8c:e6:f4:61:b7:ff:1e:b2:7f:88:10:d5: 4d:6a:ed:67:cc:66:f8:af:68:ca:30:89:b0:c6:5d: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:98:22:7F:6B:35:8E:F0:F2:13:C2:52:95:37:CF:E4:4C:E2:82:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:09:7e:73:80:9e:9e:60:31:62:14:47:7a:64:f6:e7:7d:fb: d6:ef:00:a8:07:97:ed:13:13:78:10:0d:90:e3:8c:f1:f0:3c: 77:e8:77:76:85:dd:27:2e:f1:5f:5f:5a:63:68:2e:a7:6d:0f: e1:e1:69:0e:09:a5:c0:7d:d2:5d:f5:8f:f0:86:93:60:2e:ba: 82:7a:5c:d0:6a:b4:f0:ff:e0:5b:64:bf:09:4a:1f:7e:54:5e: f0:f2:de:53:e4:99:91:9e:f9:34:ca:9c:98:13:d1:3c:70:66: 81:c3:03:7e:d9:f4:04:0c:47:d9:3e:b8:3e:30:59:0d:1f:a8: c3:cb:fb:74:58:9d:f4:bb:d4:05:2a:88:ac:30:1f:21:84:db: 49:88:eb:e3:49:bb:85:2a:ea:c8:55:81:54:49:fb:6b:6a:49: 96:0b:13:2b:5c:18:a6:b5:c7:c8:05:3a:ca:19:29:3f:9c:b2: 5d:e8:28:c2:ea:a1:f5:64:97:7c:64:a5:76:2b:da:c3:6f:0e: 6f:a1:7b:43:0d:1a:9a:fb:a5:b9:d6:ac:6e:08:23:ac:6b:2c: 86:e5:c0:bb:9f:42:c6:5b:8a:7b:e1:00:cf:cf:f7:c5:86:26: a7:2e:ab:9a:85:e0:a0:c6:c2:45:aa:91:d1:0f:da:e7:90:00: 12:bc:0b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjaZx9epDaTyXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZjIyN2M1MWEtZmFlMS00MjdlLWIyY2QtYzNlYzAzMmNhZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuv5N04p/dodU3zNgsUJViReOSx5Gp/KWEvt ySVqDViwYvN6MFPSlN89FXzUY7lzm70/4Q1hvSDs3AwjiTJrBWoTbySMXJCXRCyy m+E2KnoTdjLRCxuSi8sC3WZxF3LwITcZTdMyXMMyuf0fVi3aqaF0lkkgV4B3u3bO j2k8fF0YpvCN+T6KFh/3olIaoHdAQn/hIPNEKdhfELmyuRda3RamaavhcmugYoAv rp8qoUHo8QMbh4QprvDPulx2OmVFoHXtq0ib462LpAJatgZX7nT1CcCOyI+7xfDI kB69UJyrar6M5vRht/8esn+IENVNau1nzGb4r2jKMImwxl2tEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6YIn9rNY7w8hPCUpU3z+RM4oIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzJmM2QzOGUtYzIxMS0z NDVhLTgyZjUtNTBhOTdlNzljNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRULWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgJfnOAnp5gMWIUR3pk9ud9+9bvAKgHl+0TE3gQDZDjjPHwPHfod3aF 3Scu8V9fWmNoLqdtD+HhaQ4JpcB90l31j/CGk2AuuoJ6XNBqtPD/4FtkvwlKH35U XvDy3lPkmZGe+TTKnJgT0TxwZoHDA37Z9AQMR9k+uD4wWQ0fqMPL+3RYnfS71AUq iKwwHyGE20mI6+NJu4Uq6shVgVRJ+2tqSZYLEytcGKa1x8gFOsoZKT+csl3oKMLq ofVkl3xkpXYr2sNvDm+he0MNGpr7pbnWrG4II6xrLIblwLufQsZbinvhAM/P98WG Jqcuq5qF4KDGwkWqkdEP2ueQABK8C64= -----END CERTIFICATE-----Generated at Thu Sep 24 14:54:46 2026 by rpki-client